PT-2025-28049 · Undefined · Undefined

CVE-2024-6474 Rejected reason https://t.co/US5TDtzZD0 Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x...

PT-2025-28060 · Undefined · Undefined

CVE-2025-1631 Rejected reason https://t.co/W1rY8Hv2mo Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x...

GHSA-3V48-283X-F2W4

creationtimestamp| type| source ---|---|--- 2025-06-30 20:08:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19968...

PT-2025-27166 · Nicdark · Nicdark Hotel Booking

Name of the Vulnerable Software and Affected Versions: nicdark Hotel Booking versions n/a through 3.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

GHSA-H4RG-G6F3-GHH7

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19398...

BELL-CVE-2025-38022

Bulletin has no description...

BELL-CVE-2025-38006

Bulletin has no description...

GHSA-VQ9H-X3GR-V8RJ

creationtimestamp| type| source ---|---|--- 2025-06-18 22:41:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18815 2025-06-18 22:53:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114706821031041429...

GHSA-2QP4-G3Q3-F92W

creationtimestamp| type| source ---|---|--- 2025-06-16 20:16:57+00:00| seen| https://gist.github.com/safer-bot/b7efd49631eccbaf351804d31652b09c 2025-06-17 00:49:16+00:00| seen| https://gist.github.com/safer-bot/d5ca115ca66735f27af739cec1454583 2025-06-17 12:50:41+00:00| seen|...

TencentOS Server 4: iptraf-ng (TSSA-2024:1126)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1126 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: nano (TSSA-2024:0518)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0518 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

RHEL 7 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 7.4.22 (RHSA-2025:9115)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9115 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchrono...

TencentOS Server 3: python3.11 (TSSA-2023:0241)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0241 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

GHSA-JH2Q-MRMJ-HFF3

creationtimestamp| type| source ---|---|--- 2025-06-13 20:35:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18338...

CVE-2025-43581

creationtimestamp| type| source ---|---|--- 2025-06-10 18:33:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17960...

WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by bintable in WordPress Plugin Simple Membership versions = 4.6.3...

PT-2025-23073 · WordPress · Wp Extended

Name of the Vulnerable Software and Affected Versions: WP Extended plugin for WordPress versions up to and including 3.0.15 Description: The issue is related to Stored Cross-Site Scripting via SVG file uploads, caused by insufficient input sanitization and output escaping. This allows authenticat...

PT-2025-22905 · Pepperl+Fuchs · Profinet Gateway Fb8122A.1.El

Name of the Vulnerable Software and Affected Versions: Pepperl+Fuchs - Profinet Gateway FB8122A.1.EL affected versions not specified Description: An unauthenticated remote attacker can access a URL which causes the device to reboot. Recommendations: At the moment, there is no information about a...

CVE-2024-31120

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

CVE-2024-52358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows DOM-Based XSS.This issue affects Responsive Addons for Elementor: from n/a through = 1.5.4...